Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/b21f1949-8fe2-34db-ac02-b1c4659d3bb6.roa
File:                     b21f1949-8fe2-34db-ac02-b1c4659d3bb6.roa (raw, json)
Hash identifier:          0yYi4PJlJux9cl4zF01NL2gbJuCId+r+zF0vXQ++L4o=
Subject key identifier:   4F:76:7B:A5:26:9E:E6:2D:00:CD:CA:76:34:53:60:5C:1A:4B:78:E4
Certificate issuer:       /CN=e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf
Certificate serial:       010D0C9F4328584AAB26535BC3C522A2C2E56D80
Authority key identifier: 79:4E:35:8D:AC:45:13:27:8B:65:94:A9:E2:BA:54:F4:4C:0A:4D:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/b21f1949-8fe2-34db-ac02-b1c4659d3bb6.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     4809
IP address blocks:        69.163.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:53:5b:c3:c5:22:a2:c2:e5:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=cedfdc4e-3365-4c41-8794-3f31328693ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f4:2f:68:9d:49:f9:92:47:a6:5a:56:18:af:
                    3a:c3:dc:5e:8a:b6:3c:ca:0c:b1:4d:86:49:dd:14:
                    bf:00:89:61:d0:46:28:71:90:b8:99:6c:f7:6b:e2:
                    b3:93:1c:d2:0e:d3:58:73:64:5b:ee:92:8f:17:9e:
                    96:f5:d4:82:50:d6:45:2c:00:19:8a:ba:07:d5:50:
                    cb:b9:76:ad:eb:3c:86:b7:30:5f:2d:65:26:27:03:
                    3c:d6:ba:33:77:b1:d1:66:0e:0e:ab:56:dc:08:81:
                    62:4b:b0:55:23:79:37:4a:da:d4:6b:14:cd:1c:7a:
                    e2:ab:b3:01:0a:e0:4c:8e:fe:e0:67:14:32:d8:42:
                    1b:85:62:62:d8:47:05:ba:c3:dd:53:aa:a9:f1:34:
                    9c:a2:d3:d6:1e:fd:fe:79:04:5e:a4:b4:ba:17:9f:
                    ab:f1:42:72:e5:2e:bd:be:98:45:c1:2b:78:4b:cd:
                    73:0c:e9:4c:22:28:7f:94:ba:ba:6d:13:8b:dc:89:
                    2e:d7:4c:df:3d:af:de:ee:c9:6c:4f:63:f1:7b:6e:
                    c9:44:b2:2a:ce:ef:1d:fc:3c:44:c1:7a:2f:1c:b6:
                    32:d9:c4:bd:72:47:8a:b5:e2:16:48:11:6b:05:f7:
                    4a:ae:2c:a8:25:e8:f6:87:87:e1:62:1b:0f:72:6f:
                    51:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:76:7B:A5:26:9E:E6:2D:00:CD:CA:76:34:53:60:5C:1A:4B:78:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/b21f1949-8fe2-34db-ac02-b1c4659d3bb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.crl

            X509v3 Authority Key Identifier:
                keyid:79:4E:35:8D:AC:45:13:27:8B:65:94:A9:E2:BA:54:F4:4C:0A:4D:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.163.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:94:e1:00:79:f9:5c:54:18:0e:f2:95:bd:0f:87:66:b7:21:
         81:92:04:65:71:7a:27:ea:34:55:45:4e:f3:d9:7b:80:d7:28:
         69:de:e5:1c:b7:08:e1:97:d5:e4:47:a9:1b:83:30:e7:a6:de:
         f0:69:30:30:9c:c0:da:85:83:33:d4:8b:04:dc:26:d0:2f:2a:
         3c:13:62:de:e2:c8:58:f9:12:4b:bb:62:28:dd:cd:3e:91:cb:
         3a:35:3f:7a:1d:b3:91:f0:a6:c2:ff:9c:ff:ee:9d:f5:33:cb:
         57:3b:58:bf:a2:ab:5d:b3:b9:74:6a:99:69:48:c4:3f:97:44:
         fe:8f:2e:69:de:6d:d9:e1:dc:82:26:e6:58:a8:e7:37:7d:12:
         76:42:e6:8b:e3:1d:36:ec:bd:3f:88:42:ac:29:df:a3:80:6b:
         23:d6:4b:8c:5a:7c:d7:51:0f:5d:72:65:18:82:d4:f5:92:a7:
         38:e3:04:3b:06:f5:e2:3f:bb:07:c6:fb:7e:c7:89:88:b7:a1:
         3f:5a:f7:46:53:bf:ee:da:d8:22:88:64:fe:f2:03:e3:c5:c3:
         3f:a8:94:3c:b3:7c:39:f2:40:00:e9:fa:8e:a9:e2:03:99:f8:
         d7:ce:fd:a0:c9:22:f3:22:4c:eb:ab:90:af:4d:17:c2:85:6a:
         28:6a:17:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 13:56:20 2025 by rpki-client